Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft
File:                     2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft (raw, json)
Hash identifier:          v6txgWEP7uimCYk2gjxJVDNZwLdB5QqQaZfdlH7+CeQ=
Subject key identifier:   9E:7F:78:2C:EA:95:AE:B9:C6:13:FD:0D:67:76:6F:F3:4D:CD:B6:C8
Authority key identifier: 2F:F4:EE:9C:1F:AF:19:CB:D4:4C:CB:6C:4F:80:3B:54:DA:93:3E:88
Certificate issuer:       /CN=2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88
Certificate serial:       6D17D8B7455921B50BC3FEA8D7767A56A8CF5D0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft
Manifest number:          011F
Signing time:             Sun 24 May 2026 02:38:48 +0000
Manifest this update:     Sun 24 May 2026 02:33:48 +0000
Manifest next update:     Mon 25 May 2026 04:33:48 +0000
Files and hashes:         1: 2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.crl (hash: KnmoVPSu8eIICBiblvR9Rfb3Sglqfg4Ar3QKEccDLVg=)
                          2: 3230302e32332e3131382e302f32342d3234203d3e20323635343439.roa (hash: u0emmR/IrSgxU4xnl7NMDDuW67Pa/pzAKWRg8XfABIw=)
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.crl
                          rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 25 May 2026 04:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:17:d8:b7:45:59:21:b5:0b:c3:fe:a8:d7:76:7a:56:a8:cf:5d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88
        Validity
            Not Before: May 24 02:33:48 2026 GMT
            Not After : May 25 04:33:48 2026 GMT
        Subject: CN=9E7F782CEA95AEB9C613FD0D67766FF34DCDB6C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:4a:09:bc:ac:f2:99:50:c5:f0:38:a5:7d:6f:
                    93:ad:8e:c1:0b:89:57:d7:49:1e:6d:7b:9b:d7:33:
                    bc:4e:84:0c:e8:6e:ef:47:b1:70:c2:b6:c0:54:1f:
                    fd:96:be:5a:84:7a:3b:38:55:b8:d2:7c:be:29:1f:
                    d6:71:b3:3d:8a:37:05:62:54:f9:a9:af:11:95:85:
                    9f:49:c5:27:6c:81:45:92:52:78:1e:cd:59:80:ef:
                    34:87:26:e3:e6:27:ce:6e:e5:e2:8c:38:55:6d:9b:
                    a8:46:53:ee:13:80:c0:f8:54:0c:d4:c4:31:af:6f:
                    34:75:a2:10:c9:38:52:fd:4b:e3:93:1f:61:ad:6f:
                    a8:cd:70:79:b3:ce:35:77:f4:9c:80:70:1b:04:cc:
                    01:16:80:93:ff:54:0c:41:bb:bc:73:4c:10:4d:e1:
                    29:d7:d6:e1:7f:5f:9c:09:83:49:10:f0:03:81:0a:
                    f6:eb:5d:27:e5:a7:23:d1:35:bf:58:93:fa:21:dd:
                    a5:cd:0d:72:22:4a:01:93:1b:e3:ba:bb:bc:59:8c:
                    62:2a:6c:9e:a4:b0:31:14:15:97:fa:4b:15:b1:ba:
                    1f:df:b9:f8:19:a0:ca:c2:7c:1f:32:fd:8a:a8:6a:
                    b8:92:3d:6f:31:b1:f8:de:35:b2:4a:d9:14:2a:5c:
                    fa:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:7F:78:2C:EA:95:AE:B9:C6:13:FD:0D:67:76:6F:F3:4D:CD:B6:C8
            X509v3 Authority Key Identifier:
                keyid:2F:F4:EE:9C:1F:AF:19:CB:D4:4C:CB:6C:4F:80:3B:54:DA:93:3E:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AAWMCQFvCr77SdCtt1DEK8BLgeZUAvemDWeqzKjGihKP/0/2FF4EE9C1FAF19CBD44CCB6C4F803B54DA933E88.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:c0:5f:57:c3:e7:38:94:e0:13:46:39:6a:df:55:ab:f9:b7:
         fe:d9:46:45:ce:d9:34:3a:fb:57:36:8a:ea:8b:c4:ff:88:46:
         ff:06:d7:a4:f5:f1:32:34:f6:1e:ba:ed:3f:e4:72:2b:3f:29:
         13:7d:cc:12:72:75:9e:31:e8:c5:fa:9e:53:41:a1:ff:66:a9:
         f5:e7:83:8e:4b:ad:94:66:6c:af:d0:86:ed:ed:c0:6b:42:bf:
         7d:32:7c:93:9b:46:56:8b:a8:4a:66:1f:fb:c5:b1:2f:5b:0e:
         24:3d:d9:5c:fe:75:6e:b0:b5:74:dd:cc:49:59:bf:d6:0b:4e:
         f5:cf:d8:8a:ca:72:33:79:f1:66:47:8d:e9:df:ba:38:92:af:
         2c:49:f1:e3:30:4d:3c:56:56:7a:96:59:18:d9:8c:6d:9c:de:
         1e:b0:15:8a:d2:5c:f2:ff:26:24:37:6d:e2:45:7a:d3:db:5c:
         eb:f9:e2:b4:83:ab:cc:ef:1a:bd:3f:22:67:e6:4e:07:fb:74:
         69:e6:51:2c:bb:81:aa:7f:d3:c8:ef:3a:46:85:77:94:69:d9:
         37:58:98:e0:05:b3:79:0e:4e:71:41:3d:78:60:0a:ba:bc:b1:
         8e:58:87:7c:44:10:26:9f:86:f3:de:91:f9:8f:cc:d2:46:f1:
         fe:9c:d8:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 16:19:33 2026 by rpki-client